Skip to main content

21 October 2026: critical security updates for PHP and YOOtheme Pro 5. Is your Joomla website up to date yet? Get it checked

Emergency: Joomla website hacked

Joomla hacked? We find the hole and clean your website.

We first secure the traces, find the way in, remove malicious code and foreign content and close the hole. Then we bring Joomla and the extensions up to date.
  • We secure all traces first.
  • We look for the way in, not just the malware.
  • You know the price before we start.
  • Joomla and extensions are up to date afterwards.
Ask for help 0176 103 183 56Rather talk directly?
Check a suspicion
Free
Website hacked
from €490
net
Protection afterwards
from €30
net / month
Our approach

Secure first. Then clean.

!
Deleting in a hurry wipes out the traces. That is why we work in fixed steps.
Secure the state
Files and database, before anything changes
Find the way in
Outdated extension, password or foreign file
Clean
Remove malware, foreign files and accounts
Harden and release
Update, change passwords, Google review
Until we start: delete nothing and do not restore an old backup.
Price before we start.
We name the price before we begin.
17
years of Joomla experience
specialised in Joomla since 2009
ENT practice Dr. Wischatta
Karate Sülfeld
Nord-Bike Sülfeld
Swingolf Hamburg
ICD Hamburg
Peter Reuff Licht
Transparent price guide

What does the clean-up cost?

The effort depends on how far the infection reaches. We name the exact price after a first look at your website.
First assessment
Free
You describe what you noticed. We tell you the next steps and the price.
Describe the suspicion
Check a suspicion
Clean-up
Help in an emergency
from €490
net
Secure traces, find the way in, remove malware, close the hole and update Joomla.
Ask for a clean-up
Website hacked
Protected afterwards
from €30
net / month
With the maintenance contract Joomla and the extensions stay up to date, with backups and regular security checks.
Ask about maintenance
Protection afterwards
Important:
All prices net. We name the exact price after a first look at your website, before we start. If more websites share the same hosting, we check them too so the infection does not come back.

Our offer is aimed at businesses, self-employed people, associations and institutions, not at consumers. All prices net plus VAT.

First aid

Before we start:
What you should do now.

The first steps decide whether the attack can be traced. Delete nothing and do not hastily restore an old backup – otherwise traces are lost and the hole stays open.

Change passwords
From a clean device, for the hosting and all Joomla administrators.
Delete nothing
Do not restore an old backup either, as long as the way in has not been found.
Let us know
With what you noticed. With an acute infection, best by phone.
If personal data was affected, there may be a duty to report under the GDPR. Please clarify this with your data protection officer; we supply the technical facts.
Secure traces
Understand first, then clean.
Typical signs

How to recognise a hack.

Not every attack is visible straight away. These are the signs we see most often.

Foreign content

Pages, links or ads you did not create, sometimes only visible to Google.

Warning from Google

Google or the browser warns visitors about your website.

Unknown accounts

The Joomla backend has administrators nobody at your company created.

Redirects

Visitors end up on foreign pages, often only on smartphones or from Google search.

Spam from your own server

The host reports that masses of emails are sent through your website.

Blocked by the host

The host has taken the website offline because of malicious code.
How we work

Four steps to a clean website.

We do not just clean what you can see. Only when the way in is closed does the website stay clean.

Secure the state

We first back up files and database so that no traces are lost.

Find the way in

We look for the cause, such as an outdated extension, a weak password or a foreign file.

Clean

We remove malicious code, foreign files and unknown accounts and restore damaged files.

Harden and release

We bring Joomla and the extensions up to date, all passwords are changed, and we prepare the Google review with you.
Before we start, you know the next steps and the price.
Ask for help now
Honestly calculated

What the effort depends on.

Every infection is different. These points decide how much work the clean-up takes.
We name the price before we start.

Extent of the infection

How many files, content items and user accounts are affected.

State of Joomla and extensions

We bring outdated versions up to date before the release.

More websites in the hosting

If several websites share the same hosting, we check them too so the infection does not come back.

Our offer is aimed at businesses, self-employed people, associations and institutions, not at consumers. All prices net plus VAT.

Good to know

Frequently asked questions when Joomla is hacked

The most important answers for the first hours after the suspicion.
What should I do straight away if I suspect a hack?
Delete nothing and do not hastily restore an old backup, otherwise traces are lost. Change the passwords for the hosting and the Joomla administrators from a clean device and get in touch with us.
What does cleaning a hacked Joomla website cost?
The clean-up starts from €490 net. The effort depends on how far the infection reaches. We name the exact price after a first look at your website, before we start.
Is it enough to simply restore an old backup?
Usually not. The backup must date from before the attack, and the hole the attacker came through is still open afterwards. We close it first, otherwise the website will soon be infected again.
Google warns about my website. How is the warning removed?
After the clean-up you request a review in Google Search Console; we prepare it with you. The warning only disappears once Google classifies the website as clean.
Do I have to report the attack?
If personal data was affected, there may be a duty to report under the GDPR; please clarify this with your data protection officer (no legal advice). We supply the technical facts, such as what was affected and when.
How do I protect the website from a new attack afterwards?
With current versions of Joomla and extensions, strong passwords with two-factor login and regular security checks. The maintenance contract includes these checks, the Business and Premium packages also a firewall for Joomla.
Personal, not a ticket

Rather talk directly?

Not sure whether your website has been hacked? Describe what you noticed.
0176 103 183 56Call without obligation
Have a suspicion checked
Ask for help

Describe what you noticed.

Send us the address of your website and a short description. We get in touch, clarify the open questions and tell you the next steps. With an acute infection, it is best to call directly.
Free first assessment
Price before we start
Traces are secured before we clean
Or call us directly:0176 103 183 56

We are happy to advise you personally.

Ufuk Avcu
Your personal contactUfuk Avcu · Owner & developer

Free first estimate

Two required details are enough to start.

Please enter your website.
This email address is being protected from spambots. You need JavaScript enabled to view it.Please enter a valid email address.
Invalid input
Invalid input
Invalid input
Invalid input

We use your details to process your inquiry. More in our privacy policy.